summaryrefslogtreecommitdiffstats
path: root/shell-completion/bash/systemd-cryptenroll
blob: 1723f75beea25b67fa8bced3de2de879d41879b1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
# systemd-cryptenroll(1) completion                   -*- shell-script -*-
# SPDX-License-Identifier: LGPL-2.1-or-later
#
# This file is part of systemd.
#
# systemd is free software; you can redistribute it and/or modify it
# under the terms of the GNU Lesser General Public License as published by
# the Free Software Foundation; either version 2.1 of the License, or
# (at your option) any later version.
#
# systemd is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License
# along with systemd; If not, see <https://www.gnu.org/licenses/>.

__contains_word() {
    local w word=$1; shift
    for w in "$@"; do
        [[ $w = "$word" ]] && return
    done
}

__get_fido2_devices() {
    local i
    for i in /dev/hidraw*; do
        [ -c "$i" ] && printf '%s\n' "$i"
    done
}

__get_tpm2_devices() {
    local i
    for i in /dev/tpmrm*; do
        [ -c "$i" ] && printf '%s\n' "$i"
    done
}

__get_block_devices() {
    local i
    for i in /dev/*; do
        [ -b "$i" ] && printf '%s\n' "$i"
    done
}

_systemd_cryptenroll() {
    local comps
    local cur=${COMP_WORDS[COMP_CWORD]} prev=${COMP_WORDS[COMP_CWORD-1]} words cword
    local -A OPTS=(
        [STANDALONE]='-h --help --version
                     --password --recovery-key'
        [ARG]='--unlock-key-file
               --unlock-fido2-device
               --pkcs11-token-uri
               --fido2-credential-algorithm
               --fido2-device
               --fido2-with-client-pin
               --fido2-with-user-presence
               --fido2-with-user-verification
               --tpm2-device
               --tpm2-device-key
               --tpm2-seal-key-handle
               --tpm2-pcrs
               --tpm2-public-key
               --tpm2-public-key-pcrs
               --tpm2-signature
               --tpm2-with-pin
               --tpm2-pcrlock
               --wipe-slot'
    )

    _init_completion || return

    if __contains_word "$prev" ${OPTS[ARG]}; then
        case $prev in
            --unlock-key-file|--tpm2-device-key|--tpm2-public-key|--tpm2-signature|--tpm2-pcrlock)
                comps=$(compgen -A file -- "$cur")
                compopt -o filenames
                ;;
            --unlock-fido2-device)
                comps="auto $(__get_fido2_devices)"
                ;;
            --pkcs11-token-uri)
                comps='auto list pkcs11:'
                ;;
            --fido2-credential-algorithm)
                comps='es256 rs256 eddsa'
                ;;
            --fido2-device)
                comps="auto list $(__get_fido2_devices)"
                ;;
            --fido2-with-client-pin|--fido2-with-user-presence|--fido2-with-user-verification|--tpm2-with-pin)
                comps='yes no'
                ;;
            --tpm2-device)
                comps="auto list $(__get_tpm2_devices)"
                ;;
            --wipe-slot)
                comps='all empty password recovery pkcs11 fido2 tpm2'
                ;;
        esac
        COMPREPLY=( $(compgen -W '$comps' -- "$cur") )
        return 0
    fi

    if [[ "$cur" = -* ]]; then
        COMPREPLY=( $(compgen -W '${OPTS[*]}' -- "$cur") )
        return 0
    fi

    comps=$(__get_block_devices)
    COMPREPLY=( $(compgen -W '$comps' -- "$cur") )
    return 0
}

complete -F _systemd_cryptenroll systemd-cryptenroll